This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
File:                     9_nYpDVdZzudTn8VXTp45eZg_qU.mft (raw, json)
Hash identifier:          2S6+uXMp391WHxRxlWdUrZGgpZkAxccN72+tfa3MmNs=
Subject key identifier:   E5:46:38:69:C1:54:01:D8:03:07:97:B7:80:11:7D:30:3D:3A:91:74
Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5
Certificate issuer:       /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5
Certificate serial:       051D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
Manifest number:          0515
Signing time:             Sat 24 Jan 2026 17:02:34 +0000
Manifest this update:     Sat 24 Jan 2026 17:02:34 +0000
Manifest next update:     Sat 31 Jan 2026 17:02:34 +0000
Files and hashes:         1: 9_nYpDVdZzudTn8VXTp45eZg_qU.crl (hash: liM7rJCmuWjH6VszT0NuDyzeXgJtP49+6yoItMgXh1Q=)
                          2: 53647CC8284511EE8A9EF045C4F9AE02.roa (hash: J2C44o3bulGEWCNj5FeHw89zdl6vfT7xLoQDvxzcXms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1309 (0x51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5
        Validity
            Not Before: Jan 24 17:02:34 2026 GMT
            Not After : Jan 31 17:02:34 2026 GMT
        Subject: CN=6974fb2a-bd33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b4:92:2f:16:6a:6e:e7:46:34:0d:19:69:15:
                    18:68:b6:24:b0:2f:a3:e1:14:9e:0b:8c:1b:50:3a:
                    30:49:94:4d:33:72:b2:12:28:5a:a4:17:bf:04:4d:
                    5a:f3:62:8f:29:59:4f:e6:aa:2d:3d:dd:f3:13:7f:
                    56:01:e8:6f:c2:b2:39:a7:75:27:56:62:d5:74:76:
                    d7:80:47:65:6b:18:37:88:f8:f2:14:cb:bf:28:3e:
                    ea:29:f2:50:3a:e4:32:2a:c5:59:58:fe:3e:7b:11:
                    38:82:46:bc:03:b8:85:8d:89:62:d5:11:ba:00:fd:
                    d4:7e:25:48:a4:1d:d4:b7:9f:1a:61:b3:ed:2e:ad:
                    e8:05:3c:63:7a:ac:f0:d1:41:9e:14:8f:6d:d4:98:
                    06:ed:d5:e6:14:bb:53:ee:d8:2a:f9:26:60:e9:52:
                    bc:a5:65:79:98:53:08:b6:80:e2:f9:28:9f:e7:6f:
                    90:1b:6f:18:91:e8:89:61:c3:94:ce:87:67:63:a5:
                    ae:7c:33:68:82:49:61:29:83:74:db:5c:73:69:b0:
                    41:7e:7b:79:ca:d2:ec:32:5d:5c:f5:99:d6:65:0f:
                    1e:77:da:40:3a:73:7d:64:a4:2d:63:e7:7b:4b:30:
                    ec:59:94:4f:6a:2b:de:c5:3f:60:3b:24:10:4a:df:
                    32:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:46:38:69:C1:54:01:D8:03:07:97:B7:80:11:7D:30:3D:3A:91:74
            X509v3 Authority Key Identifier:
                keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7e:0b:df:80:f1:13:80:e3:ed:79:95:b1:e5:e8:e7:8e:63:
         57:b6:71:73:c4:c8:66:68:55:31:39:2d:ec:ac:49:0b:6b:46:
         4c:e6:b2:59:cb:3c:ba:47:bb:4c:9e:31:91:d0:c1:9d:3d:34:
         9b:c0:9f:ec:a7:85:2f:c8:28:90:20:ac:37:67:d9:4e:7c:90:
         40:4a:41:bd:f8:66:62:b6:6f:93:65:45:f9:ff:5e:76:25:06:
         1e:25:aa:2b:52:b4:dc:e8:e4:11:d8:11:95:9a:88:a3:b0:a0:
         f5:c6:95:47:76:48:4e:0d:db:b2:b7:60:f3:a9:53:95:38:36:
         dd:97:d6:97:89:9b:6a:0d:29:88:11:5f:da:9f:5a:d4:38:3a:
         4a:11:36:6c:cc:34:b3:3d:57:e3:57:7b:4f:8e:c0:02:a6:19:
         c8:97:08:6b:cd:48:02:51:85:51:f0:ab:3a:7c:03:42:8d:61:
         51:e3:45:58:68:92:bd:0e:5a:85:a6:4d:e9:3c:23:df:f0:66:
         90:cd:61:1c:20:f0:55:8e:dc:a0:81:c6:a2:2b:05:17:51:5e:
         3b:a6:8e:5b:ff:26:00:50:f5:71:9f:aa:10:bb:9b:fe:37:58:
         b7:b9:33:c9:0f:7c:db:93:f2:1b:13:2d:3a:cc:7a:73:21:fd:
         6a:de:e5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:02:15 2026 by rpki-client